Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
File:                     7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft (raw, json)
Hash identifier:          4pkm+yReaCIc9i9oydBria/nK3IezSv2yOCk/KzS61c=
Subject key identifier:   80:D7:36:07:4F:2C:98:C0:06:48:BC:AD:03:47:A7:50:41:B8:C7:45
Authority key identifier: ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5
Certificate issuer:       /CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
Certificate serial:       019EBF23807B6CA0E7866EF2AEDFDFD0DCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
Manifest number:          68
Signing time:             Sat 13 Jun 2026 04:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:35 +0000
Files and hashes:         1: 7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl (hash: UMmey/N2JJCJdpF2lMn5sUOmffD6SWBxmMd3mpKT1os=)
                          2: qhw-oWhw0NTepwRC4uCmjdN0RG0.asa (hash: Eh7fHtr19LeexhS3SBHy5ilwQiwjvV00HdoOnKi+arg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:80:7b:6c:a0:e7:86:6e:f2:ae:df:df:d0:dc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
        Validity
            Not Before: Jun 13 04:00:35 2026 GMT
            Not After : Jun 14 04:00:35 2026 GMT
        Subject: CN=80d736074f2c98c00648bcad0347a75041b8c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:59:a6:09:ec:73:72:e4:c6:dc:dc:56:b4:
                    11:e4:28:ab:3d:2f:58:cc:7d:62:8d:ce:a7:eb:08:
                    b8:b9:96:b9:49:69:ef:ed:72:c0:fe:88:6f:56:80:
                    ae:51:6d:a7:d3:aa:71:6e:90:c0:a4:ad:56:05:c3:
                    6e:f9:e1:37:31:0d:d0:12:88:b7:04:3a:b0:d1:18:
                    26:71:82:0a:95:c0:d9:bb:81:9c:24:44:77:e6:49:
                    ec:9a:ff:c4:e8:9d:6b:7f:30:8e:f7:2a:e9:2d:75:
                    c6:64:14:58:f1:44:01:98:cb:d8:68:f9:b9:d2:f5:
                    c2:2a:d8:ba:d7:c2:24:a6:d1:da:63:8f:08:31:b3:
                    ed:e4:64:73:4a:b1:9d:04:ac:89:00:5b:35:23:f2:
                    84:fe:59:89:eb:19:b5:5e:a1:b4:a4:ed:f1:b7:d9:
                    28:9c:54:53:55:aa:3d:3b:5d:f9:62:1f:82:bb:ee:
                    6d:cb:78:fc:9f:bd:44:44:b9:88:2e:b1:dd:23:6b:
                    dc:29:63:6b:f9:19:81:a4:ed:a7:3b:35:77:2b:61:
                    4b:0d:fd:d7:51:cd:8a:74:c3:8d:eb:bb:3a:6f:31:
                    e1:92:6c:57:7f:6d:06:d9:78:24:53:b8:86:7f:59:
                    75:b2:f6:73:67:39:ef:c3:ae:c3:2f:18:1a:6f:b0:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:36:07:4F:2C:98:C0:06:48:BC:AD:03:47:A7:50:41:B8:C7:45
            X509v3 Authority Key Identifier:
                keyid:ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:65:d3:ea:69:4b:05:ec:fb:e8:b7:98:34:b4:93:9f:43:
         9e:d6:0e:44:71:b5:93:6c:7b:ff:22:c3:71:be:86:c4:12:3c:
         2f:19:0d:15:30:83:56:17:d5:c5:af:34:5b:dd:a3:c2:76:3d:
         2f:4a:70:b9:66:18:6b:46:93:f4:59:77:c8:8a:76:bd:35:e0:
         1b:08:a1:ca:bd:f1:32:21:dd:54:80:6e:a9:35:4e:41:73:ab:
         5b:79:25:0d:6b:a8:7f:2f:c8:75:4e:ad:cc:34:ef:33:bc:8b:
         3d:63:ca:1c:e0:f6:4d:45:7c:69:ea:8f:7f:16:b6:63:dd:f8:
         f0:28:04:5c:e9:73:62:26:73:9f:75:94:8f:5f:61:f3:8f:82:
         2a:05:a7:c9:09:2d:8c:57:fe:db:56:eb:0b:35:50:41:da:e0:
         58:7b:21:71:cb:3b:70:09:d2:c7:95:09:bc:ee:14:33:55:9e:
         fc:b0:53:cd:b0:3f:90:11:90:8a:16:35:4f:89:ee:17:bd:ca:
         01:22:b3:d0:da:27:c8:bb:4f:de:1e:9b:84:71:59:97:b3:e5:
         7b:f6:42:5b:7e:c6:71:76:2f:45:75:b8:44:ec:c9:4d:75:2c:
         93:8f:3a:cc:f5:af:bb:bf:7d:5b:cb:2e:2f:65:1a:39:85:27:
         25:f0:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:51 2026 by rpki-client